Sign in
Auth

Request a password reset link

Changed on

Always returns the same 200 body regardless of whether the email exists, to avoid account enumeration. If a user matches, a single-use 1-hour token is generated and the reset link is emailed via SMTP (requires SMTP_HOST and DASHBOARD_BASE_URL; there is no stdout fallback). email_delivery reports whether this deployment can deliver reset emails at all — deployment posture, computed independently of any match, so it leaks no account existence.

post/v1/auth/password-reset/request

Request

  • Base URL: http://localhost:8080
  • URL: http://localhost:8080/v1/auth/password-reset/request
  • Auth: HTTP bearer

Request body

emailstring email required

Response

Request accepted (identical body regardless of email existence)

messagestring required
email_delivery'ok' | 'not_configured' required

Whether this deployment can deliver reset emails (SMTP configured AND DASHBOARD_BASE_URL set). Deployment posture, never account state.

Changes